Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/K91I3fJcxzt_7eQCDOlG2xuy6jo.roa
File: K91I3fJcxzt_7eQCDOlG2xuy6jo.roa (raw, json)
Hash identifier: 9glW+DbV1RQc65Bfu+jEjrkprRUeMjDmjwOiIxds8Bo=
Subject key identifier: 2B:DD:48:DD:F2:5C:C7:3B:7F:ED:E4:02:0C:E9:46:DB:1B:B2:EA:3A
Certificate issuer: /CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
Certificate serial: 018D18DC0FFBEC78CCB197DE9C47D1504134
Authority key identifier: B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/K91I3fJcxzt_7eQCDOlG2xuy6jo.roa
Signing time: Wed 17 Jan 2024 19:18:11 +0000
ROA not before: Wed 17 Jan 2024 19:18:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62055
IP address blocks: 89.38.42.0/24 maxlen: 24
89.38.45.0/24 maxlen: 24
185.48.192.0/22 maxlen: 22
2a01:98e0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:18:dc:0f:fb:ec:78:cc:b1:97:de:9c:47:d1:50:41:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
Validity
Not Before: Jan 17 19:18:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2bdd48ddf25cc73b7fede4020ce946db1bb2ea3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b7:75:44:f5:bc:02:df:83:bf:47:af:c4:66:
17:9a:55:a3:2f:34:8a:28:64:30:f4:3a:d8:ef:61:
3b:79:12:62:18:7e:77:3b:85:06:9f:16:2b:b5:c6:
e8:59:7b:81:5e:db:f9:06:5d:72:df:76:fc:3c:c9:
3b:10:4b:47:90:a1:a8:26:86:de:13:29:9e:93:cf:
b4:5b:de:c0:91:fb:7d:21:bb:d4:5b:06:d8:b1:74:
9e:a2:e0:db:b9:77:c4:3e:aa:f1:87:e3:e9:42:1d:
cd:c8:c4:7f:4d:e4:9a:18:fb:59:31:35:86:e8:83:
ee:bc:fc:c6:23:f7:75:b7:03:20:35:47:d7:aa:40:
96:37:aa:36:cb:fb:c8:3c:85:49:e2:06:57:71:f5:
9b:2d:d7:cb:89:8d:18:a5:30:28:c7:1a:e9:28:db:
45:92:e4:dd:67:ab:ea:ff:1d:27:61:fa:51:cc:5a:
9c:25:9d:3f:a1:bd:86:4f:a8:e3:60:fe:11:00:0c:
73:bd:50:c6:c6:52:a1:c6:69:80:4e:d0:fa:45:56:
7d:96:a2:74:63:07:75:22:de:10:ff:89:8b:4b:85:
00:9f:7e:a9:85:d0:2c:1f:4b:be:89:41:40:d9:f5:
c5:5e:da:0c:df:7a:24:0f:31:29:e0:d8:a8:9e:72:
2b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DD:48:DD:F2:5C:C7:3B:7F:ED:E4:02:0C:E9:46:DB:1B:B2:EA:3A
X509v3 Authority Key Identifier:
keyid:B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/K91I3fJcxzt_7eQCDOlG2xuy6jo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.38.42.0/24
89.38.45.0/24
185.48.192.0/22
IPv6:
2a01:98e0::/32
Signature Algorithm: sha256WithRSAEncryption
8a:72:b9:d8:ce:90:77:51:ac:bb:0f:94:d6:75:92:59:d6:4c:
e5:66:90:00:f1:89:09:6d:9a:a1:e9:38:b3:0b:ff:d6:b4:b1:
07:75:c7:75:64:8b:bc:7b:61:86:a8:70:e9:87:32:4c:18:4a:
e9:13:a5:00:b2:e9:1f:8b:9c:a9:a1:a1:8a:a1:46:bf:25:f4:
56:09:90:fd:04:56:c8:2a:52:e9:8c:72:30:25:a1:4d:ef:c7:
d6:10:a2:df:e0:02:4f:bf:89:e3:34:91:08:5f:c0:67:a6:e7:
e8:5a:d7:fc:c1:23:c2:67:1b:09:86:ad:8b:e1:b4:b9:e1:b9:
ef:68:82:99:82:55:f5:24:eb:1b:5e:75:19:94:c6:e9:05:27:
6e:08:0e:5e:e7:b3:4d:22:6f:30:60:d0:2e:f0:89:d3:dd:be:
56:20:c9:2e:e8:96:52:49:1d:3f:6b:25:31:0a:a7:f8:a6:a9:
1d:80:f3:04:0c:58:a5:9c:b7:17:31:44:6d:92:de:29:6b:e2:
95:e6:96:3b:d2:d7:ac:95:34:e6:e5:11:26:98:8a:8f:f1:7c:
6a:60:9f:05:a0:0c:16:2e:6e:7a:d6:5a:5c:98:c1:7b:b0:a9:
3e:0a:8e:33:a0:73:81:be:a2:15:6d:a3:b1:23:69:dd:06:df:
38:b5:b3:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:47:17 2024 by rpki-client on console-fra.rpki-client.org